Overview

overview

10

Static

static

10

7db33185f1...fa.exe

windows7-x64

10

7db33185f1...fa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7db33185f1eb10c9ad3a85f38c436d65975b2ab20887683898a27fa5fb7864fa.exe

  • Size

    226KB

  • MD5

    6d947dc383b8ba3288bcc62596542a49

  • SHA1

    343726364297f2ca5d4ee6ef27a81b15e21fd4b2

  • SHA256

    7db33185f1eb10c9ad3a85f38c436d65975b2ab20887683898a27fa5fb7864fa

  • SHA512

    45a3c9b275235c192b1526ff779e08103a1b9569fbae95c796888ca6aa466b6dd35756f071e20511f5d75f8bfe6f9d900c107f20924002c7a6e2802ea4aa1e75

  • SSDEEP

    3072:u+STW8djpN6izj8mZwk72RH7UbBgNcaUTLLHjezfRh3/Et986+WpC:T8XN6W8mmk7SUbMUbjeRhPK

Score
10/10
ratdefaultasyncratstormkitty

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

https://api.telegram.org/bot1675074810:AAHEEllh3coYCYZg222nkWnMeo1ufI7LvTI/sendMessage?chat_id=1604540576
Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • StormKitty payload 1 IoCs
  • Stormkitty family
    stormkitty

Files

  • 7db33185f1eb10c9ad3a85f38c436d65975b2ab20887683898a27fa5fb7864fa.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections